Lucene search

K
freebsdFreeBSDA4372A68-652C-11E0-A25A-00151735203A
HistoryMar 12, 2011 - 12:00 a.m.

OTRS -- Several XSS attacks possible

2011-03-1200:00:00
vuxml.freebsd.org
6

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.3%

OTRS Security Advisory reports:

Several XSS attacks possible:
An attacker could trick a logged in user to following a prepared
URL inside of the OTRS system which causes a page to be shown that
possibly includes malicious !JavaScript code because of incorrect
escaping during the generation of the HTML page.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchotrs< 3.0.7UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

70.3%

Related for A4372A68-652C-11E0-A25A-00151735203A